VDB
CVE-2024-12380
CVE-2024-12380
PUBLISHED
CVSS 7.5 HIGH
An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information.
EPSS 0.55% · 43.9th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.55%
43.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 11.5.0 |
| Bitnami | gitlab | 11.5.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Mar 12, 2025 CVE Published
- Mar 14, 2025 EPSS Score
- Mar 14, 2025 Coalition ESS Score
- Mar 28, 2025 EPSS Score
- Apr 10, 2025 EPSS Score
- Apr 24, 2025 EPSS Score
- May 8, 2025 EPSS Score
- May 21, 2025 EPSS Score
- Jun 4, 2025 EPSS Score
- Jun 16, 2025 Coalition ESS Score
- Jun 18, 2025 EPSS Score